We're currently working on a consumer device that could well be classified in the IoT category.

We're pushing hard to put in multiple good layers of security, even though the hackable potential of the device is low. The amount of personal or otherwise exploitable information is also low. But that is no excuse to leak anything, or to allow the device to be taken over by attackers.

The path isn't easy... the library support on many of these embedded platforms is poor. But it must be done.